This is tricky. All I can suggest is that you note when the file was last changed via
"ls -l"
and maybe run the "last" command to see which users have signed on about the time the file was last changed.
the "history" command may also give a clue.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.